Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File:                     CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier:          vHvsBlZelHzPiCTiVfzaBGkSdlgZ/Vn0H8VgUD6VO9w=
Subject key identifier:   C8:E7:69:37:75:9E:EB:47:AC:27:4E:29:00:75:14:6E:45:AE:44:4D
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer:       /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial:       01962FAB374818748487A1279C6927B1121F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number:          0DFE
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: Iz0iLZyt8+tbprzcAoaHEjTktUrhvv6A1cGZslVTkMs=)
                          2: WXokG7cKriDfqWoaHraaATikOZM.roa (hash: l03IsJpcA1hZ2SxrPxTFFWqboVv9JIckV/GXuLQrkcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:48:18:74:84:87:a1:27:9c:69:27:b1:12:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=c8e76937759eeb47ac274e290075146e45ae444d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:3e:84:36:73:2d:e8:e5:04:19:36:e8:8f:
                    ae:e0:e5:62:53:df:b1:96:31:b1:57:23:67:5d:69:
                    5b:67:f7:d1:5e:ef:26:89:96:fd:eb:9b:eb:0a:bc:
                    a7:9d:42:35:44:8b:f1:ca:cf:af:27:f3:7e:f0:cf:
                    af:59:0a:ae:27:67:ca:11:a1:d1:d9:a8:76:b8:66:
                    da:20:fb:9e:d3:8c:37:c4:7f:b4:59:b3:f9:f1:04:
                    b1:1a:23:a6:92:78:ef:85:0b:58:00:f0:47:7b:d4:
                    10:f9:ff:5b:d8:ab:dd:cd:2b:8f:d0:3c:a9:3b:9f:
                    07:f1:7b:bc:e8:d8:a3:3d:bd:2e:fd:1e:c7:4c:29:
                    19:35:34:d8:8f:1f:c1:32:02:c1:96:01:d9:14:8d:
                    6f:e5:5c:0e:21:da:12:3a:2a:81:61:ae:d1:b4:27:
                    aa:42:51:4f:e5:df:d5:1a:c6:bf:df:79:6b:70:85:
                    75:f1:b9:46:5e:cb:1d:99:3c:ea:8d:9e:64:bd:c1:
                    03:2c:b3:2d:99:7b:c4:9f:3b:7b:24:00:6f:3d:ad:
                    f1:f2:7a:a5:a7:dd:1b:ea:cd:c4:17:60:b2:17:6e:
                    41:e9:8c:85:43:06:bd:0d:f2:f3:fc:84:4f:5d:3e:
                    dc:6f:84:9c:da:3e:bf:d7:cd:18:0c:5c:11:33:29:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:69:37:75:9E:EB:47:AC:27:4E:29:00:75:14:6E:45:AE:44:4D
            X509v3 Authority Key Identifier:
                keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:29:49:c4:a4:56:d5:77:06:56:9d:75:ba:6a:e0:b1:99:85:
         5c:ce:c8:8a:e0:ed:e5:79:97:3c:3e:f0:7f:11:bc:79:69:e7:
         e8:f8:6a:71:b6:d1:82:89:8d:b7:e3:01:9f:a5:08:71:e0:4c:
         81:0b:af:bd:46:5b:58:ec:09:2e:b6:f2:a1:a1:fd:9e:b8:0f:
         93:31:b2:64:fb:78:c6:95:b6:08:a0:66:2e:a2:37:15:32:6c:
         26:fc:21:90:29:49:69:7e:79:25:15:76:ef:cb:ba:84:fc:a5:
         c9:81:91:33:80:fc:cb:f8:85:f9:bb:b4:e8:46:57:24:74:89:
         bd:54:ad:19:61:21:d6:b7:35:39:e4:61:51:05:22:b4:a8:4e:
         9c:ad:12:af:f5:ac:9c:f5:15:76:94:35:63:62:85:76:6a:d3:
         23:78:f6:6d:e4:00:1a:6a:9d:12:2f:f1:0a:c7:e6:c5:93:73:
         39:7b:61:a5:52:4d:fe:70:43:33:95:73:3e:03:7b:9f:f4:fb:
         c3:99:42:1f:ef:b5:44:af:89:25:42:73:6c:10:09:f3:7b:01:
         48:58:05:4e:8e:2a:39:c7:c4:44:c8:de:90:55:0f:de:99:c7:
         06:d4:18:47:d9:97:7c:a4:bb:16:04:25:09:d5:5e:b9:af:3a:
         0a:85:47:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzdIGHSEh6EnnGknsRIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDE4ZTk2OTBkMGZiNzExYWJmMzg3NGUxYzUwMGE2Mjc2
OTNjMGEwHhcNMjUwNDEzMTUwMTEyWhcNMjUwNDE0MTUwMTEyWjAzMTEwLwYDVQQD
EyhjOGU3NjkzNzc1OWVlYjQ3YWMyNzRlMjkwMDc1MTQ2ZTQ1YWU0NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1I+hDZzLejlBBk26I+u4OViU9+x
ljGxVyNnXWlbZ/fRXu8miZb965vrCrynnUI1RIvxys+vJ/N+8M+vWQquJ2fKEaHR
2ah2uGbaIPue04w3xH+0WbP58QSxGiOmknjvhQtYAPBHe9QQ+f9b2KvdzSuP0Dyp
O58H8Xu86NijPb0u/R7HTCkZNTTYjx/BMgLBlgHZFI1v5VwOIdoSOiqBYa7RtCeq
QlFP5d/VGsa/33lrcIV18blGXssdmTzqjZ5kvcEDLLMtmXvEnzt7JABvPa3x8nql
p90b6s3EF2CyF25B6YyFQwa9DfLz/IRPXT7cb4Sc2j6/180YDFwRMyl+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjnaTd1nutHrCdOKQB1FG5FrkRNMB8GA1UdIwQY
MBaAFAhBjpaQ0PtxGr84dOHFAKYnaTwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lOTc1NjMtYzdlNS00MDM2LWE3OTYt
MjJjMGNhMjEzMzgwLzEvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lOTc1NjMtYzdlNS00MDM2LWE3OTYtMjJjMGNhMjEzMzgw
LzEvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuilJxKRW
1XcGVp11umrgsZmFXM7IiuDt5XmXPD7wfxG8eWnn6PhqcbbRgomNt+MBn6UIceBM
gQuvvUZbWOwJLrbyoaH9nrgPkzGyZPt4xpW2CKBmLqI3FTJsJvwhkClJaX55JRV2
78u6hPylyYGRM4D8y/iF+bu06EZXJHSJvVStGWEh1rc1OeRhUQUitKhOnK0Sr/Ws
nPUVdpQ1Y2KFdmrTI3j2beQAGmqdEi/xCsfmxZNzOXthpVJN/nBDM5VzPgN7n/T7
w5lCH++1RK+JJUJzbBAJ83sBSFgFTo4qOcfERMjekFUP3pnHBtQYR9mXfKS7FgQl
CdVeua86CoVHtw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net